SAP Note 3703385
Missing Authorization check in SAP Business Warehouse (Service API)
MediumCVSS 5.9SAP Business Warehouse
- CVE(s)
- CVE-2026-27686
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Affected products and versions
- Product SAP Business Warehouse (Service API)
Versions: DW4CORE 200, 300, 400, PI_BASIS 2006_1_700, 701, 702, 730, 731, 740, SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, 758, 816
Appears in
Patch Days listing this note, newest first.
- March 2026NewMediumCVSS 5.9